## The problem
Reported in Firebase: Chrome Web Store Team complains a Violation: My Extension (Cancelly.ca) is injecting the enterprise.js externally....
## The fix
Chrome Web Store flags Firebase's enterprise.js in extension builds because the default firebase/auth import pulls in reCAPTCHA Enterprise code. Fix: in SDK v10.8.0 or later, import from the firebase/auth/web-extension endpoint instead of firebase/auth. Note the endpoint doesn't support popup/redirect operations, phone auth with reCAPTCHA, SMS multi-factor with reCAPTCHA, or reCAPTCHA Enterprise; for those, use offscreen documents instead.